bind is almost 50/50

[daniel]

I have to be missing something, but at this stage, I don't know what it is.

I've setup bind on my FreeBSD box here in the office and have a few machines, 
including my desktop using it as their one and only nameserver.  it's hosting 
two domains, one as a slave (domain.com), another subdomain of that slave as 
a master (office.domain.com).  for the most part it works just fine, but 
every once in a while, Konqueror will complain that the site can't be found.  
When this happens though, all I have to do is click on the link again, and I 
get the site in question.

As a test, I did a for loop in Bash with a bunch of host lookups for random 
names.  Of the 21 hosts I picked at random, all but two returned without 
errors.  The second time i ran the same command though, all 21 returned just 
fine.  The errors I got were:

  $ host www.fireflyfans.net
  ;; connection timed out; no servers could be reached


  $ host www.jossisahottie.com
  ;; Warning: ID mismatch: expected ID 5615, got 47281
  ;; Warning: ID mismatch: expected ID 5615, got 47281
  www.jossisahottie.com is an alias for jossisahottie.com.
  jossisahottie.com has address 209.59.140.58

Forgive me, I had Buffy on the brain ;-)  The fact that both of these domains 
resolved just fine the second time through tells me it's not their fault, so 
I'm left trying to figure out what I did wrong.  My named.conf file is below 
if any of you can help out.



  $ cat /var/named/etc/namedb/named.conf
  options {
          directory       "/etc/namedb";
          pid-file        "/var/run/named/pid";
          dump-file       "/var/dump/named_dump.db";
          statistics-file "/var/stats/named.stats";
  //      listen-on       { 127.0.0.1; };
  //      listen-on-v6    { ::1; };
          forward only;
          forwarders {
  //              127.0.0.1
                  <ip of one known to be good nameserver>;
          };
  };
  zone "." {
          type hint;
          file "named.root";
  };
  zone "0.0.127.IN-ADDR.ARPA" {
          type master;
          file "master/localhost.rev";
  };
  zone 
"1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
          type master;
          file "master/localhost-v6.rev";
  };
  zone 
"1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
          type master;
          file "master/localhost-v6.rev";
  };

  // private zone files follow
  ...


I watched the firewall during this test and there were not blockages on port 
53 incoming or outgoing for the duration of the test, so I'm currently at a 
loss.  Thanks for any help you might have.


-- 
Let us endeavour so to live that when we come to die
even the undertaker will be sorry.
  - Mark Twain